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Abstract. Nominal abstract syntax is a popular first-order technique for encoding, and 
reasoning about, abstract syntax involving binders. Many of its applications involve con- 
straint solving. The most commonly used constraint solving algorithm over nominal ab- 
stract syntax; is the Urban-Pitts-Gabbay nominal unification algorithm, which is well- 
behaved, has a well-developed theory and is applicable in many cases. However, certain 
problems require a constraint solver which respects the equivariance property of nominal 
logic, such as Cheney's equivariant unification algorithm. This is more powerful but is 
more complicated and computationally hard. In this paper we present a novel algorithm 
for solving constraints over a simple variant of nominal abstract syntax which we call 
non-permutative. This constraint problem has similar complexity to equivariant unifica- 
tion but without many of the additional complications of the equivariant unification term 
language. We prove our algorithm correct, paying particular attention to issues of termi- 
nation, and present an explicit translation of name-name equivariant unification problems 
into non-permutative constraints. 



Constraint solving over the abstract syntax of programming languages is vital in many ar- 
eas of logic and computer science. For example, many compiler optimisations are typically 
phrased as constraint problems. The abstract syntax in question often involves binding 
constructs, such as A-expressions or V-quantifiers. In these cases we would want the ab- 
stract syntax encoding to respect a-equivalence of binding structures — this is known as the 
Barendregt variable convention [Bar84j . 

One approach to representing and manipulating abstract syntax with binders is nominal 
abstract syntax |GP02j . which was developed as a first-order theory of abstract syntax 
involving bound names. The theory is based on permuting, rather than substituting, names, 
as this has more convenient logical properties. Bindable names in the object-language are 
represented by meta-level names ranged over by n (these are often called atoms in the 
literature). These names follow Gabbay's permutative convention |GM08j which states that 
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distinct meta-variables ni and 77-2 over names always denote distinct names. The object- 
level binding of a name n in a term t is is represented by the abstraction term <n>t. This 
is not itself a binder, so <ni>ni and <re2>n2 are considered to be distinct terms if ni 7^ n2 
(though they should behave similarly as they are a-equivalent). 

Logic programming over nominal abstract syntax requires a unification algorithm which 
can unify nominal terms modulo a-equivalence. One such algorithm is nominal unification 
|UPG04j . which is a simple, well-studied constraint solving algorithm for nominal abstract 
syntax. The algorithm extends first-order unification to work on nominal terms modulo 
a-equivalence by adding freshness constraints which are satisfied if a given name does not 
appear free in a term. This allows terms involving binders to be equated by checking that 
they have the same topology of name bindings. Nominal unification enjoys unique, most 
general solutions |UPG041 Theorem 3.7] and is known to be decidable in quadratic time 
p^lLVTOllCFTl] . 

Resolution using nominal unification is the basis of the aProlog nominal logic program- 
ming language |CU04j . However, here we encounter a problem — resolution using nominal 
unification is incomplete for nominal logic |Pit03| . The issue is that nominal unification 
does not respect the equivariance property of nominal logic, that is, closure under name- 
permutations. A standard example, taken from [ChelOj . concerns capture-avoiding sub- 
stitution over A-terms encoded in nominal abstract syntax. Writing subst(M, M', n) to 
represent the capture-avoiding substitution function M[M'/n], the following two rewrite 
rules implement the case when M is a variable. 

subst(var(n), M', n) M' subst(var(n'), M', n) var(n') 

From the first rule we infer that subst(var(n), var(n'), n) — )• var(n'). However, nominal 
unification cannot compute a substitution for M' such that 

subst(var(n), M', n) subst(var(n'), var(n), n'). 

In nominal logic this equation holds modulo a permutation, and hence nominal unification 
does not suffice for complete proof search in all cases. 

A workaround is to define a well-formedness condition on aProlog programs to isolate 
those which can be executed correctly using nominal unification |UC05| . A more general 
solution is to use a more powerful constraint solving algorithm which takes equivariance 
into account, such as Cheney's equivariant unification algorithm [ChelOj . Equivariant uni- 
fication generalises the term language of nominal unification to include name variables A 
which stand for unknown names (and which do not follow the permutative convention) and 
permutation variables Q which stand for unknown permutations. The syntax of names and 
permutations in equivariant unification is non-trivial — for example, the terms involved in a 
swapping may themselves contain nested swappings! Furthermore, these compound name 
expressions may appear in abstraction position, so we can write terms such as 

<{i{QoQ')A) {Q-^A))n>{Q'n) 

even though the meaning of such a term is by no means obvious. The equivariant unification 
algorithm uses "permutation graphs" to solve generalised equality and freshness constraints. 
This constraint problem is NP-hard [ChelOj, and there are no longer unique, most general 
solutions. However, the main issue with equivariant unification are that the term language 
is complicated (see below), making it difficult to implement the algorithm and interpret the 
resulting answers. 
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1.1. Contributions. In this paper we present an alternative to equivariant unification, in 
the form of a constraint algorithm over non-permutative nominal abstract syntax (NPNAS). 
This is a mild generalisation of standard nominal abstract syntax and is a syntactic subset 
of the equivariant unification term language. We use the term non-permutative because no 
meta- variables, not even those representing names in binding position, follow the permuta- 
tive convention. The contributions of this paper are as follows: 

• the presentation of non-permutative nominal abstract syntax as a simple yet powerful 
extension of existing nominal techniques; 

• a novel decision procedure for solving equality and freshness constraints over non-permutative 
nominal terms, and a proof of its correctness; and 

• a reduction of name-name equivariant unification problems to non-permutative nominal 
constraints. 

We do not address the fact that equivariant unification is NP-hard, since the NPNAS con- 
straint problem is also NP-hard. However, the simplicity of the NPNAS term language 
and algorithm offer practical advantages over equivariant unification when it comes to im- 
plementing a nominal logical programming or rewriting system. The constraint solving 
algorithm described in this paper can be used to implement sound and complete resolution 
over inductive definitions involving binders, as described in [LaklOj . This is an important 
result given the ubiquity of binders in logic and computer science. 

The rest of this paper is organised as follows. Section [2] presents important background 
on nominal abstract syntax, nominal unification and equivariant unification. In Section [3] 
we present the syntax of NPNAS terms and constraints and define their semantics. We 
present a constraint transformation algorithm in Section [4] and use it to derive a correct 
decision procedure in Section [5l paying particular attention to termination. We address the 
relationship between NPNAS and equivariant unification in Section [6] by defining an explicit 
translation of name-name equivariant unification problems into NPNAS. We discuss related 
and future work in Section [7] and conclude in Section [HI 

2. Background 

This section presents the basics of nominal abstract syntax, nominal terms, nominal uni- 
fication and equivariant unification. This suffices to demonstrate the relationship of the 
non-permutative terms and constraints studied in this paper to existing work. We refer the 
reader to |Pit03| for a full introduction to nominal logic, to |UPG04j for details on nominal 
unification and [ChelOj for an in-depth treatment of equivariant unification. 

2.1. Nominal abstract syntax. As is standard in the world of nominal techniques, we 
use nominal signatures [UPG04J to specify binding structures in the object-language. 

Definition 2.1 (Nominal signatures). A nominal signature S consists of: 

• a finite set Ns of name sorts, ranged over by N; 

• a finite set of data sorts, disjoint from and ranged over by D; and 
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• a finite set Cs of constructors K -.T D, where tlie argument type T € Tyj] is generated 
by tlie following grammar. 

T G Tyj^ ::= D (data sorts) 

I N (name sorts) 

I [NIT (name abstractions) 

I X * ■ ■ ■ *T (tuples) 

I unit (unit) 

For simplicity we will assume that S is such that every type T G Ty-^ is inhabited by 
some ground tree (defined below). This property of nominal signatures can be checked 
straightforwardly — see [LaklOl Section 3.3.2] for details. 

In standard approaches to nominal abstract syntax |GP02] . bindable names are repre- 
sented explicitly in the syntax of ground syntax trees. We fix a countably infinite set Name 
of names to stand for object-language names which may be bound. The meta-variable n 
ranges permutatively over these. We assume the existence of a total function sort which 
maps every name n to a name sort G Ns such that there are infinitely many names 
assigned to every name sort. We say that n G Name{N) if sort{n) = N . 

Definition 2.2 (Ground trees). We write Tree-£ for the set of all syntax trees over the 
nominal signature S. We refer to these as ground trees following the terminology of [LaklOj . 
though they are often referred to as (ground) nominal terms. With names (and unit) as 
our building blocks, we define classes g G TreeY,iT) of syntax trees of the various types by 
constructor application, tupling and name abstraction, as follows. 

sort{n) = N 51 G Treej]{Ti) ■■■ gk e Treej]{Tk) 

n G Trees{N) () G Trees(unit) (gi, ■■■ ,gk^ G Treej]{Ti * • • • * T^) 

g G Tree^{T) {K -.T ^ D) £ sort{n) = N g £ Tree^{T) 

Kg£ Treej:{D) <n>g G Trees ([iV]T) 

The abstraction <n>g represents a term with a bound name. This term-former is not 
regarded as a binder, which means that, for distinct names n and n', we regard <n>n and 
<n'>n' as distinct ground trees. This is a consequence of following Gabbay's permutative 
convention [ GM08j . 

Definition 2.3 (Permutations and permutation actions). Let Perm be the set of all finite 
permutations over Name, that is, the set of all bijections vr such that 7r(n) = n for all but 
finitely many n. Any element of Perm can be represented as a finite list of name-swappings 
of the form (n n'). The action of a permutation vr on a ground tree g is to rename all names 
appearing in g (including those in abstraction position) according to vr. This is defined as 
follows. 

ir-n = ir{n) vr • () = () vr • (51 , . . . ,5^) - (tt • 51 , . . . ,7r • 5^) 

vr • (Kg) = K (tt ■ g) it ■ {<n>g) = <7r(n)>(7r • g) 

Using the definition of permutation action. Figure [1] defines a type-directed equality 
relation between two ground trees and a freshness relation between a name and a ground 
tree. The equality relation corresponds {g g' -T) to a-equivalence |GP02] . This defini- 
tion of a-equivalence paraphrases that of [Bar84j . as shown by Gabbay and Pitts |GP02t 
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sort{n) = N 91 =a g'l-Ti ■ ■ ■ Qk =a g'k ■ Tk 



n=an:N ()=a():unit (gi , . . . ,gk) =a Wi , ■ ■ ■ ,g'ky-Ti * ■ ■ ■ * Tk 

g=ag':T {K:T^D)e^ 9 =a g' '-T sortjn) = N 

Kg=aKg':D <n>g =a <n>g' ■.<N>T 

sort{n) = sort{n') = N 
n ^ n' n rffi g' g {nn') ■ g' -.T n ^ n' 



<n>g =a <n'>g' : [N^T n n' n # () 

n# gi ■■■ n!^ gk n g n n nfg 

n igi, . . . ,gk) n f. K g niji<n>g nifi<n'>g 

Figure 1: Equality and freshness for ground trees 

Proposition 2.2]. The freshness relation (n ^ g) holds when the name n is not free in the 
ground tree g. We write FN{g) for the set of names n which appear in g and are such that 
n ^ g holds. 

Finally, a relation R C Trees (^i) * • • • * Tree-£{Tk) is equivariant if, for all permutations 
vr, R{gi, . . . , gk) holds iff R{tt ■ gi, . . . ,11 ■ gk) holds. It is not hard to show that the equality 
and freshness relations from Figure [Dare both equivariant. 



2.2. Nominal unification. Nominal unification [UPG04] is a simple, well-studied con- 
straint solving algorithm which extends first-order unification to work on ground trees with 
binders modulo a-conversion. The language of ground trees from Definition 12.21 is extended 
to include metavariables with suspended permutations -n X. When X is instantiated by a 
substitution a the permutation must be applied to produce the result vr • {a{X)). Problems 
consist of equality (t = t') and freshness (n # t') constraints. These are solved in the con- 
text of a freshness environment V of freshness assumptions n# X between a name and a 
meta- variable which constrain the free names in an unknown term: if (n # X) € V then X 
cannot be replaced by any term which has a free occurrence of n. 



2.3. Equivariant unification. As mentioned above, equivariant unification jChelO| con- 
siderably extends the term language of nominal unification, with complex permutation 
expressions involving unknown names and unknown permutations. For the purposes of this 
paper it suffices to consider equivariant unification problems involving only terms of a fixed 
name sort A'^, ranged over by a. These are generated by the grammar below. We write n 
where |ChelO| uses a, for consistency with the rest of this paper. 



Vertices w 

Name-terms a, b 
Permutation-terms 11 



n (name) 

A (name variable) 

n • V (suspended permutation) 

i (identity) 

(a h) (swap) 

Q (permutation variable) 
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"Vertices" is a term used in [ChelOj , where equivariant unification problems are represented 
as "permutation graphs". A compound permutation expression 11 may be an unknown 
permutation Q, a swapping {a a') or an exphcit permutation composition or inversion. 
Equivariant unification name-terms may be either concrete names n or name-variables A. 
We abbreviate l ■ v as just v in most cases. We write n;A;Q h a ok to mean that n ^ 
names {a), A ^ namevars{a) and Q ^ pvars{a), and extend this definition to other elements 
of equivariant unification syntax in the obvious way. 

The semantics of equivariant unification problems was defined in |ChelO| and we briefiy 
summarise the relevant details here. We concern ourselves with ground valuations 9 applied 
to name-terms, in particular, the portion of the valuation that provides values for name 
variables A and permutation variables Q, in terms of ground names n. 

• If j4 € dom(9) then ^(^4) = n, for some n € Name. 

• If Q E dom{9) then 9{Q) is a ground permutation, which can be represented as a finite 
(possibly empty) list of name-swappings {nn'). 

The semantics of name-name equivariant unification problems is as follows, after |ChelO| . 

• 1= a ~ 6 iff 9{a) =a 9{h) :N, using the rules for a-equivalence from Figure [TJ 

• 9 \= a b iS 9{a) ^ 9{b), using the rules for freshness from Figure [TJ 

• If S" is a finite set of equivariant unification constraints c (referred to as a problem) then 
Sat{S) = {9 \ yce S. 9 ^ c}. 

Name-name equivariant unification problems are known to be NP-complete, whereas full 
equivariant unification (at an arbitrary type T) is known to be NP-hard, but not necessarily 
NP-complete [Cheinj . 

The additional constructs supported by equivariant unification give it the power to solve 
equations modulo a permutation. One can compute whether there exists a permutation vr 
such that (vr • t) =a t' holds by choosing a fresh permutation variable Q and solving the 
equivariant unification problem {{Q ■ t) ~ t'}. This suffices to allow complete matching and 
proof-search in nominal logic programming. 

3. Syntax and semantics of non-permutative constraints 

In this section we present the syntax of non-permutative nominal terms and constraints 
over these. We also define a semantics for non-permutative nominal constraints. 

Schematic terms are used in informal mathematics as templates which may be used to 
produce a (potentially infinite) set of ground instances, quotiented by a-equivalence. To 
permit this, they contain variables which are instantiated with (a-equivalence classes of) 
ground terms according to certain rules. We fix a countably infinite set Var of variables as 
placeholders for unknown a-equivalence classes. We will use various symbols, typically x, 
y, etc., to range non-permutatively over these. 

Definition 3.1 (Non-permutative nominal terms and atomic constraints). The sets Term's 
of (schematic) non-permutative nominal terms t and Constrj: of atomic constraints over the 
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xedom{A) A{x) = T Als t:T {K:T^D)eT. 



A hs x:T 



A hs Kt:D A hs :unit 

AhsifcrTfc Ahsx:iV Ahst:T 



Ahs (ti,...,tfc):Ti*...*Tfc 

Ahst:r Ahst':T 



AFs <a;>t: [iVlT 
Ahsx:iV Ahst:T 



Ahj:t = t' ok Ahsx#t ok 

Figure 2: Typing rules for non-permutative nominal terms and atomic constraints 



nominal signature S are defined as follows. 

t G TerrriY. '■'■= x 

I <x>t 

I Kt 

I a,.. 

I 

c € ConstvY. ::= i = i 

I x#t 



(variable) 
(abstraction) 
(data) 
,t) (tuple) 
(unit) 

(equality constraint) 
(freshness constraint) 



Our main departure from traditional approaches to nominal abstract syntax is that there 
are no permutative names in the syntax — all object-level names are represented by non- 
permutative variables at the meta-level, even those which appear in binding position. Since 
the variables are non-permutative, distinct variables may be instantiated with the same 
ground tree, which we call aliasing. As we shall see, the fact that bound names may be 
aliased means that a schematic term can be instantiated to multiple different a-equivalence 
classes in general. The abstraction term-former is not a binder, so there are no meta-level 
binding constructs in schematic terms. Hence it is meaningless to define a-equivalence on 
schematic terms directly. 

Remark 3.2 (Omission of name-constants). Unlike the equivariant unification term lan- 
guage, we have not included explicit permutative name-constants in the grammar of non- 
permutative nominal terms from Definition 13. 11 We omit them in part because they do not 
add expressive power — a combination of non-permutative variables and name inequality 
(freshness) constraints can be used to imitate permutative name-constants in constraints, 
as mentioned in Remark 16. 121 Furthermore, permutative name-constants are not needed to 
achieve a sound and complete encoding of inductive definitions over terms involving binders, 
as shown in [ LPnQl iLaklH] . 

We let A range over typing environments, which are finite partial functions from Var 
to Tuy^ which assign types to variables. We write dom(A) for the domain of definition of A. 
Figure [2] provides rules which define typing judgements of the form A l-£ t:T for terms and 
A\-Y. c ok for atomic constraints. Note that if A hs t : holds then t must be a variable 
X such that A(2;) = for some name sort A^ € N^. 
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Definition 3.3 (Non-permutative nominal constraint problems). Let c range over finite 
conjunctions ci & • • • & Cfc of atomic constraints, where each q G Constrj]. Then, a non- 
permutative nominal constraint problem in Prob-£ has the form 3A(c), and is well- formed 
(written 3A(c) ok) iff A c ok holds for all c G c. 

Having specified the syntax of non-permutative terms and constraint problems, we now 
turn to their semantics. We will give a semantics to atomic constraints and constraint 
problems in terms of instantiations of their variables with a-equivalence classes of ground 
abstract syntax trees. To do so, we must first define a notion of ground trees quotiented by 
a-equivalence. 

Definition 3.4 (o-trees). Let a-TreeY.{T) be the set of all =Q-equivalence classes of ground 
trees of type T, which we call a-trees. We let a range over a-trees. If 5 G TreeY,iT) then 
we write [g\a for the set {g' \ g =a g' -T} of all ground trees which are a-equivalent to g. If 
g G TreeY,{T) then {g\a G a-Tree^{T). In the special case where g G a-Treej:{N) it follows 
that g = [n]a = {n}, for some n G Name{N) (since constructors cannot produce trees of 
name sorts). 

a-trees represent the object-language terms quotiented by a-equivalence which are so 
frequently used in informal mathmatical parlance. They will form the basis for the semantics 
of non-permutative nominal constraints. We now extend the standard notions of "free 
names" and "freshness" from nominal abstract syntax to a-trees. 

Definition 3.5 (Free names and freshness for a-trees). Suppose that a G a-TreeY,{T). 
Then, we write FN (a) for the finite set FN{g) for some/anjo ground tree g G Trees (T) 
such that a = [g]a- Furthermore, if G a-TreeY,{N) then we know that = [n]^ for some 
n G Name{N). Then, we write a ^ 0' and say "0 is fresh for a'" iff n ^ FN{a'). 

We now describe the instantiation of schematic terms, which involves replacing the 
variables with a-trees to produce specific ground instances. 

Definition 3.6 (a-tree valuations). An a-tree valuation y is a finite partial function which 
maps variables to a-trees. We write dom{V) for the domain of the partial function. Given 
a type environment A we write a- Trees (A) for the set of all a-tree valuations V such that 
dom(y) = dom(A) and V{x) G a-Treei;(A(x)) for all x G do'm{V). This ensures that the 
valuation respects types. 

Using the proof techniques from |Pit06j we can show that there exists an instantiation 
operation Itjy which respects both types and a-equivalence classes, i.e. if A hs t:T and 
V G a- Trees (A) then Jtjy G a-Tree^iT) holds, where Jtjy is as follows. 

Ixjv = V{x) 

mv = {9]a =^ lKt}v = [Kg]a 

[Olv = [()]« 

Ihjv = [gi]a ^ ■ ■ ■ /\ Itkjv = [9k]a =^ Uh, . . . ,tk)jv = [(9l> ■ ■ ■ >gk)]a 

V{x) = [n]a A Itjv = [g]a =^ l<x>tjv = [<n>g]a 

Since variables stand for unknown a-trees, not unknown trees, we see that schematic terms 
describe an a-tree as opposed to a tree. Precisely which one depends on how the variables 



"'^Some/any properties are characteristic of nominal techniques for representing abstract syntax — see 
[Pit06] for a rigorous mathematical treatment. 
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in the term are instantiated. This reflects the common practice of leaving a-equivalence 
implicit and using representatives to stand in place of the whole class |Bar841 Conven- 
tion 2.1.13]. 

Applying an a-tree valuation to a schematic term is "possibly-capturing" with regard to 
the binders in the underlying language of ground abstract syntax trees, even when in abstrac- 
tion position. For example, given distinct variables x, y, z we cannot regard the schematic 
terms <x>z and <y>z as equivalent because if we let V = {x ^ [n]a,y ^ [n']a,z i— )• [n]a} 
(with n 7^ n') then we get 



Barendregt |Bar84j does not draw a distinction between names and schematic variables, 
but in our presentation there is a clear distinction between non-permutative variables x 
and permutative names n. Even when in abstraction position, we allow non-permutative 
variables to be aliased, that is, we allow syntactically distinct variables to be assigned with 
the same underlying name. We can model names which behave permutatively by imposing 
additional constraints that the variables must be mutually distinct [LaklOt Section 6.4]. 

Lemma 3.7 (Substitution lemma). If A hs t':T and A hs x =t ok and V G a-Trees(A) 



We are now in a position to define the semantics of non-permutative nominal constraint 
problems, in terms of satisfying ground instantiations by a-tree valuations. 

Definition 3.8 (Satisfaction of atomic constraints). For an atomic constraint c such that 
A c oA; and an a-tree valuation V G a- Trees (A), we write V \= c to mean that 'V 
satisfies c", which is defined by cases on c. 



In the case of freshness constraints, this relation is well-defined by virtue of the points noted 
in Definition 13.51 

Definition 3.9 (Satisfiable constraint problems). For a constraint problem 3A(c) such that 
hs 3A(c) ok, we say that \= 3A(c) holds iff there exists a valuation V G a-Treej]{A) 
such that y 1= c for all c G c. 

For example, suppose that we have variables x and y of some name sort A^. Then, the 
a-tree constraint problem <x>y=<y>x is satisfied by any valuation V such that V{x) = V{y), 
as both sides of the equality constraint are then instantiated to the same a-equivalence class 
[<n>n]a- Note that if we used permutative names Ux and Uy then the corresponding con- 
straint problem <nx>ny = <ny>nx would not be satisfiable, because the two terms are ground 
but are not in the same a-equivalence class. This corresponds to the non-permutative con- 
straint problem <x>y = <y>x Sc x #y where we simulate permutative behaviour by adding 
appropriate freshness constraints. This constraint problem is also unsatisfiable, because the 
first constraint <x>y = <y>x is only satisfiable by a valuation V if ^(a;) = V{y). However, 
no such valuation can satisfy the freshness constraint x #y. 

Definition 3.10. We write NonPermSat for the decision problem {(A ,c)\\= 3A(c)}. 

It is trivial to see that NonPermSat is decidable because it is a syntactic subset of 
the equivariant unification problem, which was shown to be decidable by Cheney in his 



l<x>zjv = [<n>n]a / [<n'>n]a = l<y>zjv. 




□ 



mv = jt'jv 

V^t = t' 



V{x) # Mv 
V \= x#t 
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thesis |Che04[ Chapter 7]. In previous work |LP09j we showed that NonPermSat is is 
NP-hard by a reduction of graph 3-colourabihty. In Section [6] of this paper we present 
an alternative proof of NP-hardness by defining an encoding of name-name equivariant 
unification problems (which are known to be NP-complete |ChelOj ) into NPNAS. It follows 
from [ChelOl Theorem 1] that NonPermSat is in NP and hence that NonPermSat is NP- 
complete. 

Remark 3.11 (Permutations and equivariance) . This section has hardly mentioned name- 
permutations, which are a staple of most nominal techniques for abstract syntax involving 
binders (as discussed in Section [2TT]) . They are not required because a-equivalence is handled 
by the explicit use of a-equivalence classes of ground trees in the semantics. However, it is 
not hard to show that the semantics of non-permutative nominal constraints is equivariant, 
that is, that (for any c) the set {V \ |= c} is closed under name-permutations. 

4. Constraint transformation algorithm 

We define a non-deterministic transition relation, — >, which transforms a single constraint 
problem into a finite, non-empty set of constraint problems. Figure [3] presents transition 
rules for the transformation relation. To save space, we write x # xi..^ for the conjunction 
X # xi & ••• & X # Xk- We also write <xi..k>t as a shorthand for the iterated abstraction 
term <xi> ■ ■ ■ <Xk>t, where the list of abstractions may be empty unless explicitly stated 
otherwise. Note that Figure [3] does not contain explicit rules for handling constraints of 
the form <xi..k><x>t = <yi..j^><y>t' or x # <yi-k^<y>t' because the additional abstraction 
term-former is implicitly folded into the initial abstraction list during pattern-matching. 

Rules (F1)-(F3) and (E1)-(E3) deal with unit, data and tuple terms in the usual way: 
the only difference is that we work within nested abstractions. The abstractions do not 
play any part in these six rules, except that the lists on both sides of an equality constraint 
must be of the same length. The rules (F5) and (E5) dispose of trivial constraints: in the 
case of (F5), two names of different sorts will always be fresh for each other and in the case 
of (E5), any term is equal to itself. 

The most interesting rules are (F4) and (E4), which deal with the scopes of bound 
names with respect to the nested abstractions. We first consider (F4). In order for x to 
not appear free anywhere in <yi..fc>y, either x should map to the same name as one of the 
abstracted variables yi,. . . ,yk or x should be distinct from all of the abstracted variables 
and be constrained to be fresh for the unknown term y. Unlike in nominal unification, 
transforming a freshness constraint with this rule may produce new equality constraints to 
solve. 

Rule (E4) deals with equality constraints between variables of some name sort N. We 
handle these constraints by noting that the way to resolve the binding scope of the names 
X and y is to start at the innermost binding occurrence and work towards the outside. 
Therefore, it should be the case that either x and y both unify with the innermost binder 
(xfc and yk respectively), or that they should both be distinct from the innermost binder 
and unify with the next one moving outwards (i.e. Xk-i and yk-i), and so on, or that x and 
y should be distinct from all of the potential binders and equal to each other. This method 
of dealing with equality constraints between bound names seems more natural than existing 
methods based on name-swapping. 
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The final two rules, (E6) and (E7), eliminate variables from the problem by substituting 
throughout the remaining constraints. They use a notion of substitution c[t/a;] which re- 
places all occurrences of the variable x in c by the term t. These substitutions are capturing 
with respect to the abstraction term-former. Rule (E6) is the standard variable elimination 
rule from first-order (syntactic) unification. The side-condition x ^ vars{t) on this rule en- 
forces the occurs check which is necessary to avoid cyclic substitutions. The side-condition 
X G vars(c) ensures that this rule can only be invoked once per variable, which is necessary 
for termination. 

Rule (E7) deals with equality constraints of the form <xi..k>x=<yi..k>t, where A; > 0, the 
occurs check succeeds and t is not a variable, i.e. t is some compound term. This includes 
the case where there are more initial nested abstractions on one side than the other. We 
cannot simply substitute t for x here because of the preceding abstractions: x might need 
to be instantiated with a term syntactically different from t. For example, to satisfy the 
constraints (x #y) k {<x>x* = <y>K y) it is clear that x* must be mapped to K x, not K y. 
This is where swappings are necessary in both nominal and equivariant unification: however, 
this is not an elegant solution when bound names are represented using variables, because 
the potential for aliasing means that the result of a "variable swapping" such as (xy) ■ z is 
not unique. 

Since we cannot make progress using a swapping, we note that the side-condition that t 
may not be a variable means that we know the outermost constructor of t. This allows us to 
impose some structure on the unknown term represented by x by narrowing |AEHOO] . The 
rules from Figure |4] define a narrowing relation which factors out this common functionality 
at unit, tuple, data and abstraction types. 

The intuitive reading of [A;t] [A*;t*] is that the term t* represents a "pattern" for 
terms with the same outermost constructor as t. The subterms of t* are variables which 
stand for the (as-yet unknown) subterms of the term referred to by the variable x. The 
extra type environment A* is needed to ensure that the variables used to create t* do not 
appear elsewhere in the constraint problem. They must also be mutually distinct, as in 
rules (N3) and (N4). This gives rise to the following lemma, which is proved by cases on 
the narrowing rules. 

Lemma 4.1 (Narrowing and typing). // [A;t] 1=^ [A*;t*] and A hs t:T then dom{A) n 



The narrowing procedure is lazy in the sense that each narrowing step using rule (E7) 
does not replicate the entire structure of the term t but just its outermost constructor. If 
there is further structure on one side, rule (E7) may be applied repeatedly. There is no rule 
for narrowing against variables because they have no internal structure to copy. Constraints 
of the form <xi..k>x = <yi..k>y are simply left alone when A(x) is not a name sort — this is 
in direct contrast to nominal unification. It is not immediately obvious that this is correct, 
and we will address this point in the proof of Lemma 15.281 below. 

Remark 4.2 (Relationship to existing algorithms). Since NonPermSat is a syntactic subset 
of the full equivariant unification problem studied by Cheney, the problems considered here 
could be handled using a subset of the rules presented in [ChelO] for solving "general nominal 
unification" problems. The main difference is that our rules use the lazy narrowing approach 
to delay case analysis until the body of the abstractions is itself a variable of name sort. 
We also note that a simplified narrowing-based approach was used to solve swapping-free 
equivariant matching problems in polynomial time in [ChelOl Section 5.2]. 




□ 
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(Fl): 3A((x#<yi..fc>())&c) ^3A(c) 

(F2): 3A{{x#<yi..k>Kt) & c) — > 3A{{x # <yi..k>t) kc) 

(F3): 3A((x#<yi..fc>(ti, ... ,tj)) kc) 

3A((x # <yi..fe>ti) & • • • & (x # <yi..k>tj) k c) 
(F4): 3A((x#<yi..fc>y) &c) 

f 3A((x = yi)&c) if A(x) = A(yi). 

3A((a; # yi) & (x = 2/2) & c) if A(x) = A(y2). 

3A{{x # & (x = T/fe) & c) if A(x) = A{yk). 

[ 3A{{x #yi..k)k{x#y)kc) 
if fc > 0. 
(F5): 3A((x # y) & c) — )■ 3A(c) 

if A(x) = N, A{y) = N' and N ^ N' . 
(El): 3A((<.Ti..fc>() = <yi..k>0) kc)^ 3A{c) 

(E2): 3Ai{<xi..k>Kt = <yi..k>Kt') kc)^ 3A{{<xi..k>t = <yi..k>t') k c) 

(E3): 3A((<xi..jk>ai, ... =<yi..jk>ai tp)&c) 

^ 3A((<.xi..fc>ti = <yi..fc>t;) & • • • & (<xi..fe>ij = <yi..k>fj) & c) 
(E4): 3A((<xi..fc>x = <yi..k>y) k c) 

' 3A{{x = Xk) kiy = yk) kc) _ if A(x) = A(xfe). 

3A((a; # Xk) k{x = Xk-i) k{y# yk) k{y = yk-i) k c) if A{x) = A{xk-i). 



3A{{x # Xk..2) k{x = xi) k{y# ^^,.2) & (y = yi) & c) 
3A{{x # Xfc..i) & (y # yfe..i) k{x = y)kc) 
if A; > and A(x) = N, for some N. 
(E5): 3A((x = x) & c) — ^ 3A(c) 
3A((x = t) kc) 



if A(x) = A(xi). 



(E6): 



3A{{t = x)kc) 



3A{{x = t) kc[t/x]) 



if x ^ ?;ars (t) and x G wars (c) . 

, , 3A((<Xi..A:>X = <yi..A:>t) & c) 

^ 3A((<yi..fc>t = <xi..fe>x) &c) 

3A, A*((.T = r ) & (<xi..fe>t* = <yi..fc>t) & c[f*/x]) 
if t is not a variable, x ^ vars{t), k> and [A;t] l=> [A*;t*]. 



(Nl) 



Figure 3: Constraint transformation rules 

x^dom{A) {K:T^D)e'B 



(N3) 



[A;()]^[0;()] ^^^^ 
Ahs (ti,...,tfc):Ti*---*Tfc 



[A;ii:t] ^ [{x:T}-Kx] 



[A; (ii, ... ,tk)] [{xi:Ti,...,Xfc:rfc}; (xi, ... .x^)] 

A hs <x>t : [TV] T x' ^ x" 4 dom(A) 

CN4) — - 

^ ^ [A; <x>t] ^ [{x' : A^, x" : T}; <x'>x"] 

Figure 4: Narrowing rules 
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We conclude this section with the straightforward result that well-formedness of con- 
straint problems is preserved by the transformation rules. The proof is by cases on the 
transformation rules from Figure [3l In the case for rule (E7) we require Lemma 14.11 to 
deduce that the narrowing step preserves well-formedness. 

Lemma 4.3 (Preservation of well-formedness). // 3A(c) ok and 3A(c) — > 3A'(c') 
then hs 3A'(c') ok. Furthermore, A' D A. □ 



5. A CORRECT DECISION PROCEDURE 

We now present an algorithm for deciding satisfiability of non-permutative nominal con- 
straint problems. We begin by considering the correctness of individual transformation 
rules from the previous section and prove that, with careful consideration of termination, 
the transformation rules can be used to give a correct decision procedure for NonPermSat. 

5.1. Soundness and completeness of transformations. We first prove soundness and 
completeness results for the individual constraint transformation rules from Figure [3l We 
begin by stating a lemma which relates substitution and constraint satisfaction, which will 
be needed for the cases for rules (E6) and (E7) which involve substitution. 

Lemma 5.1 (Substitution property of satisfaction). Suppose that 3A,x:T(c) ok, 
A hs t:r, y G a-7Vees(A,x:r) and y(x) = My. Then V ^c[t/x] iff V ^c. □ 

We now prove that the transformation rules are sound., i.e. that the transformation 
steps do not introduce any additional satisfying valuations to the problem. 

Theorem 5.2 (Soundness of transformations). Suppose that 3A(c) ok, 3A(c) — > 
3A'(c') and V \= c' all hold, where V G a- Trees (A'). Then V \=c holds, where V is the 
restriction ofV to dom{A). 

Proof. By case analysis on the transformation rule used to derive 3A(c) — > 3A'(c'). The 
cases for rules (F1)-(F4) and (E1)-(E4) are straightforward, using standard facts about the 
definition of constraint satisfaction. The case for (E5) follows because V \= x = x holds for 
any V and x. Similarly, the case for (F5) follows because V \= x #y holds for any V, x and 
y if A(x) and A{y) are different name sorts. The case for (E6) relies on Lemma l5.ll The 
remaining case, for (E7), is dealt with in detail below. 

(E7): In this case we have c = {<xi..k>x = <yi..k>t) & c* and furthermore that c' = (x = t*) & 
{<xi..k>t* = <yi..fc>t) & c[t*/x], where t is not a variable, x ^ vars{t), k > and [A;t] l=^ 
[A*;r]. Furthermore, A' = A, A*. By assumption we get that V \= x = t*, V \= 
<xi..k>t* = <yi..k>t and V \= c*[t*/x] all hold, for some V G a-rrees(A, A*). From 

V \= X = t* we know that V'{x) = lt*Jyi, (since x ^ vars{t)) and then by Lemma [5. II and 

V \= c*[t* /x] we get that V \= c* holds. Furthermore, we know that <xi..k>t* = <yi..k>t 
is {<xi..k>x = <yi..k>t)[t* /x], because x ^ vars{t). Therefore, by V' \= <xi..k>t* = <yi..k>t 
and Lemma [5. II we can show that V \= <xi..k>x = <yi..fc>t holds. Thus we get that V' \=c 
holds, and hence that V \=c, as required. □ 
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Next we prove that the constraint transformation rules are complete, i.e. that every satisfying 
valuation is preserved across some transformation of a constraint problem. We present some 
preliminary lemmas concerning narrowing before moving on to the main proof. 

Lemma 5.3 (Possibility of narrowing). Ift is not a variable and A t:T then there exist 
A* andt* such that [A;t] [A*;t*] holds. 

Proof. By cases on the narrowing rules from Figure HI which cover all syntactic cases for t 
except for when i is a variable. In each case, the types from the typing assumption A t : T 
match those required by the appropriate narrowing rule, so we can apply that rule to find 
A* and t* such that [A;t] [A*;t*], as required. □ 

Lemma 5.4 (Narrowing and satisfaction). Suppose that A hs <xi..k>x = <yi..k>t ok and 
that V € a-rrees(A) is such that V \= <xi..k>x = <yi..k>t holds. If [A;t] [A*;t*] 
then there exists V* € a-Tree-s{A, A*) which agrees with V on dom{A) and is such that 
V*{x) = lt*}v*. 

Proof. From [A;t\ [A*;t*] and Lemma W7\\ we get that dom{A) n dom{A*) = 0. Thus 
it follows that there exist a family of valuations V* € a-Trees(A, A*) which agree with V 
on dom(A), and it just remains to show that V*{x) = \t*\v* holds for some such V* . We 
prove this by cases on the narrowing rule used to derive [A;t] [A*;f*]. In each case, 
V \= <xi..k>x = <yi..k>t implies that the outermost term-former of V*{x) is the same as that 
of , and since [A;t] l==^> [A*;t*] this is also the same as the outermost term-former of 
|{t*]]y*. Thus we can choose a valuation V* which instantiates the variables in dom{A*) 
such that V*{x) = \t*\v* holds, as required. □ 

Definition 5.5 (Successor sets). We write sitcc(3A(c)) for the successor set of 3A(c), 
which we define as the set {3A'(c') | 3A(c) — > 3A'(c')}. 

Theorem 5.6 (Completeness of transformations). Suppose that 3A(c) ok, V G 
a- Trees (A) cind V \= c all hold, and that succ{3A(c)) ^ 0. Then there exists 3A'(c') G 
succ{c) and V' € a- Trees (A') such that V' \= c' , where V and V' agree on dom{A). 

Proof. Since succ{3A{c)) 7^ it follows that c matches the left-hand side of one of the 
constraint transformation rules from Figure [3] and satisfies any side-conditions. Then, the 
proof is by case analysis on c. The cases of c which match rules (F1)-(F4) and (E1)-(E4) 
are straightforward and follow from standard properties of constraint satisfaction. 

If c is (x = x) & c the transition uses rule (E5) and the result is trivial by assumption, 
the problem on the right-hand side being a subset of the problem on the left-hand side. If c 
is (x # y) & c, where x and y are distinct variables of different name sorts, then (F5) applies 
and again the result follows trivially. We invoke Lemma l5. II in the case for (E6). The case 
for (E7) is less straightforward, and we give details for this below. 

Case c = {<xi..k>x = <y\..k^t) k c*: We also assume that t is not a variable, x ^ 
vars{t), and > all hold. Furthermore, we assume that V G a- Trees (A), where 
V \= <xi..k>x = <yi..k>t and V \=c* both hold. Since t is not a variable, by Lemma [53] 
we get that [A;t\ \==^ [A*\t*] holds for some A* and t* . We can then match against 
rule (E7) and get that c' = {x = t*) & {<xi..k>t* = <yi..k>t) & c*[t*/x] and A' = A, A*. By 
Lemma 15.41 there exists V' G a- Trees (A') which agrees with V on dom{A) and is such 
that V'{x) = ie}v'- It follows that V' ^x = t* and V ^ <xi..k>t* = <yi..k>t both hold. 
Finally, we can use Lemma 15.11 to deduce that V' \= c* [t* / x] , and hence that V' \= c' 
holds, as required. □ 
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The following corollary follows immediately from Theorem 15.21 and Theorem 15.6^ and sum- 
marises the results of this section. 

Corollary 5.7 (Soundness and completeness of transformations). Assume \—£ 3A(c) ok 
and succ{3A{c)) = {3A, Ai(ci), . . . , 3A, Ak{ck)} both hold. Then, for any V G Q-TreeE(A), 
^ N c there exists a valuation V' which extends V to dom.{A, Ai) and is such that 
V \= Ci, for some i € {1, . . . , k}. □ 



5.2. Termination. A key feature of any decision procedure is that it must always termi- 
nate, but here we run into a problem: for some constraint problems it is possible to get 
infinite reduction sequences. For example, given a datatype nat for natural numbers, if 
n > then the constraint problem 

3A{{<xi..k>x = <2/i..fc>S y) & {<yi..k>y = <xi..fc>S x)) 

can be reduced to 

3A,x':nat,y':nat((x = S2;') & {y = Sy') & {<xi..k>x' = <yi..k>Sy') & {<yi..k>y' = <xi..k>Sx')). 

There is clearly the possibility of divergence as we have recovered a variant of the original 
problem. In this section we attempt to address this problem by defining a decidable test on 
constraint problems and proving that this test allows us to avoid reducing may-divergent 
problems. We begin by introducing some terminology — we say that a constraint problem 
3A(c) is 

• terminal (written 3A(c) -/-^) if there does not exist a constraint problem 3A'(c') such 
that 3A(c) 3A'(c'). 

• a — >-normal form of 3A*(c*) if there exists a finite transformation sequence from 3A*(c*) 
to 3A(c) and 3A(c) is terminal. 

• strongly normalising if all transformation sequences starting from 3A(c) eventually reach 
a terminal constraint problem. 

• may-divergent if there exists an infinite transformation sequence starting from 3A(c). 

Our termination check will involve translating elements of Probj] into a subset of Prob^, 
which corresponds to first-order unification problems. Since first-order unification is known 
to be decidable, we can check whether the first-order unification problem that underlies a 
given non-permutative constraint problem is satisfiable. From this we will deduce whether 
the non-permutative constraint problem is strongly normalising. 

We refer to this abstraction interpretation process as "first-order reduction" , and begin 
by reducing nominal signatures and types to first-order versions. 

Definition 5.8 (Reducing nominal signatures). For every nominal signature S we write S** 
for the underlying first-order signature, which has Nj^b — and D^t — Os- Furthermore, if 
(ivTiT ^ L>) e S then {K D) G S'' holds, where is defined as follows. 

iV^^unit ([iV]r)^ ^unit*(r^) D^^D unit^ ^ unit 



{Ti*---*Tkf ^{T,')*---*{Tk'). 
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Note that we reduce all name sorts to the unit type and all abstraction type-formers [Nl T 
to the product type unit * {T'")- Thus we lose all information on the types of object-level 
names but retain some information on the locations of abstractions in the original type. 

Definition 5.9 (Reducing type environments). For any type environment A we write A** 
for the type environment such that 

• dom{A^) = {x I x G dom{A) and A(x) is not a name sort}; and 

• A\x) = {A{x)f for all x G dom(A^). 

Note that dom{A^) C dom{A) by definition. We now define a similar first-order reduc- 
tion operation on non-permutative nominal terms — this definition includes a type environ- 
ment A as a parameter, which is necessary to decide how to handle variables when they 
are encountered during the reduction process. This definition is related to the morphism 
between nominal and first-order terms defined in [CFllj . 

Definition 5.10 (Reducing terms). For a term t, let A be any type environment such that 
A hs t:T holds for some T. Then, define the first-order reduction of t under A, t^, as 
follows. 

-^ = (" if ^(-) - ™ (<,>t)^A(o,4) o^Ao 

I X if A[x) IS not a name sort 

(i^t)^^K(4) ai,...,tfc)^ = ((t4),....(tfc^)) 



Mirroring Definition 15.81 we turn any variables of name sort into unit terms and translate 
abstraction term-formers into a pair consisting of unit and the reduced abstraction body. 
This will be convenient later on because it ensures that the "size" of a reduced term 
(defined below) is the same as the size of the original term t. It is straightforward to show 
that if A hs i:r then A^ h^^b We also get a "weakening" result: if A hs tiT and 

A' I) A then t^, = t^. We now extend the definitions to constraint problems. 

Definition 5.11 (Reducing constraint problems). The reduction of constraints c under 
A, where A \-^c ok, is defined as follows. 

4 = {tA = tA\iti = t2)€c}. 

For a constraint problem 3A(c), we write {3A(c))^ for the corresponding reduced constraint 
problem 3A''(4)- It is trivial to show that if 3A(c) ok holds then h^t, (3A(c))^ ok 
also holds. 

When reducing constraint problems we discard any freshness constraints, since these 
are not present in first-order unification problems. This is not an issue since freshness 
constraints cannot cause may-divergence in our constraint transformation rules. For equality 
constraints, we simply apply the first-order reduction defined in Definition 15.101 to both 
terms separately. 

In order to reason about the satisfaction of reduced constraint problems we must define 
first-order reductions of ground trees, Q-trees and a-tree valuations. 
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Definition 5.12 (Reducing ground trees). We define the first-order reduction g of a ground 
tree g as follows. 

n^=() 0^=0 (<n>5)^ ^ (0,5^ {Kgf^K{g^) 

(gi, ■■■ ,9k)^ = igi , ■ ■ ■ ,9k)- 

It is easy to show that g € TreeY,{T) implies g^ G TreeY,\>{T^) for any ground tree g. 
Regarding a-equivalence, if g € Tree-^iT) then [g^]a = {g^} and [g^]a G a-Tree-^\,{T'^). 
Furthermore, if gi =a g2-T then gi^ = g2 ^ since the first-order reduction process erases 
all names. This property means that we can define the first-order reduction of a-trees 
as follows: [g\a = [g^\oi = {g^}- In turn, this allows us to define a first-order reduction 
operation on a-tree valuations. 

Definition 5.13 (Reducing a-tree valuations). If y € a-TreeE(A) then we write V'^ for the 
valuation which has domiV^) = dom{l^) (and hence dom{y^) C domiV)) and is such that 
y''(x) = {V{x))^ for all x € domiV^). It is straightforward to show that if F G a-rrees(A) 
then G a-Tree^b (A^). 

We will use W to range over valuations in a-Tree2b(A'') if the starting a-tree valuation 
in a- Trees (A) is irrelevant. Now, a key task is to show that satisfaction is preserved by the 
process of reduction to first-order form. 

Lemma 5.14 (Reduction and valuation). For any S, V, A, t and T, if A t:T and 

V G a-rrees(A) then (^y)^ = {t^Jy,. 

Proof. The proof is by induction on the structure of t. In the base case where i is a variable 
which is not of name sort, we use the defining properties of . □ 

Lemma 5.15 (Reduction and satisfaction). For any S, A, c and V , i/ A c ok and 

V G a- Trees (A) then V \=c implies H ^A- 

Proof. Since Definition 15 .111 discards all freshness constraints in c and translates all freshness 
constraints, it suffices to show that, for any equality constraint (ti = t2) G c, if = lt2}v 

then {ti^Jv^ = lt2^Jv^. If we assume that {tijv = Mv then (pijy)^ = (Mvf, and by 
Lemma [5. 141 we get that [ti^Jyb = [i2Aly^' ^ required. □ 

We can now prove an important result about the satisfaction of non-permutative con- 
straint problems and state its corollary. 

Theorem 5.16 (Reduction and satisfiability). For any A andc, if% hs 3A(c) ok then 
^ 3A(c) implies ^ (3A(c))^ 

Proof. If \= 3A(c) then there exists a valuation V G a- Trees (A) such that y ^ c. By 
Lemma[5T5]it follows that ^ c^, where G a-Treesb(A''). Thus we have ^ (3A(c))^ 
as required. □ 

Corollary 5.17 (Reduction and unsatisfiability). For any E, A andc, if 9 hs 3A(c) ok 
then ^ {3A{c)f implies ^ 3A(c). □ 
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Corollary 15 . 1 71 tells us that if the first-order reduction (3A(c)) is unsatisfiable then the 
original problem 3A(c) is unsatisfiable. This is one of the properties that we require of a 
correct termination check for non-permutative constraint problems. It just remains to show 
that if the first-order reduction (3A{c))^ is satisfiable then 3A(c) is strongly normalising. 

We begin by showing that satisfaction of reduced constraint problems is preserved by 
substitution, in the following sense. 

Lemma 5.18 (Satisfaction and substitution). For any S, A, c, x, t and W , suppose that 
A\-Y;-c ok and A\-j^x =t ok and W G Q-Tree^b (A^). Then, ifW^c^^ and W ^ x^^ 
then W ^ {c[t/x]f^. 

Proof. If ^ = then we know that [x^Ji^/ = [t^lvK- By Definition 15.111 it suffices 
to prove that a similar substitution property holds for all equality constraints (ti = t2) € 
c. We assume that A hs ti : T and A hx; t2:T (for some T) and that A x = t ok 
and W G a-TreeY),{A^)., and show that [ti^Jvy = [[i2AlvK and [x^Jvk = [*a1vf imply 
[[(ii[i/x])^]vi/ = [[(i2[^/3;])Alvy- We now perform a case split: if T is a name sort, the result 
follows from the fact that t'\ = {t'\t/x\f^ if t and x are both of name sort; otherwise it 
follows from Lemma [3T71 and the fact that {t'[t/x\)\ = t'\[t\/x\. □ 

We can now show that solutions to reduced problems are preserved by reduction of the 
original problem. 

Lemma 5.19 (Preservation of reduced solutions). //0 3A(c) ok and W G a-TreeYb{^) 
and W \=1^^ and 3A(c) — > 3A'(c') then there exists a valuation W' G a-Tree-^b{A'^) which 
agrees with W on dom(A^) and is such that W \= c'^'- 

Proof. We assume that hs 3A(c) ok and W G a-Treej.i,{A^) and W \=c^^ and 3A(c) — > 
3A'(c') all hold, and proceed by case analysis on the constraint transformation rule used to 
derive 3A(c) 3A'{c'). 

The cases for rules (F1)-(F3) and (F5) are straightforward since c'^' = c^- In the 
case for rule (El) the new constraints in c'^' are all trivially satisfied. The cases for rules 
(E2) and (E3) follow directly from the semantics of non-permutative constraints, defined in 
terms of [tjy. The case for (E5) follows because c'^' is obtained from simply by deleting 
a constraint. In the cases for (F4) and (E4) the additional constraints in c'^/ are all simple 
equality constraints in involving tuples and unit, which are trivially satisfied. The cases for 
(E6) and (E7) both rely on Lemma 15.181 to deal with substitution. In the case of (E7) we 
also use the fact that the variables in the "patterns" generated by the narrowing rules from 
Figure m always use fresh variables. This allows us to safely extend W to produce a larger 
valuation W. □ 

In order to prove a termination result we will need to define some kind of size metric 
on constraint problems, by interpreting them into a well-founded set. 

Definition 5.20 (Sizes of ground trees). Let N+ be the set {n G N | n > 1}. Then we 
define a size function size{g) which maps from ground trees into N+, as follows. 

size{n) = 1 size(K g) = 1 + size{g) size{<x>g) = 2 + size{g) 



size{0) = 1 





ie{i,...,k} 
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Since g g' implies that size{g) = size{g'), the above definition induces a weU-defined size 
function on a-trees: size{[g]a) = size{g) for some/any representative g of the a-equivalence 
class. Furthermore, size{g) > 1 for all g. 

Definition 5.21 (Sizes of terms and atomic constraints). If A hs i:T (for some type T) 
then we define a function [t] : {a-Treej^a{A^)) — >■ N+ as follows. 

Is22e(l4'(xjj otherwise 

\OMW)^i \Kt]{^)i+\t]{w) iih,...,tk)MW)^i+ MW- 

ie{i,...,k} 

We now extend this definition to atomic constraints — if A \-y; c ok we define a function 
\c] : (a-Tree2b(A^)) ^ N+, as follows. 

\t = t']{W)^\t]iW) + \t'] (W) \x#t']{W)^ \t'] (W). 

Note that \t] (W) > 1 and \c\ (W) > 1 both always hold. 

Lemma 5.22 (Equality constraints and sizes). For all S, A, t, t' and W, i/ A hs t =t' ok 

and W G a-Treej^,{A^) and TV ^ ^ =*'a then It^iW) = \t']{W). 

Proof. If ly h 4 = * A then |4lvi/ = aIvk- Hence sizeift^Jw) = size{lt\}w). It is 
straightforward to show that size 

(It^Jw) = \t](,W) (the crucial cases are for names and 
abstractions) and hence we get that [t](Ty) = [t'](Ty), as required. □ 

Definition 5.23 (Solved variables). We say that a variable x is solved in 3A(c) iff there is 
precisely one occurrence of x in c, where that occurrence is in a constraint of the form x = t 
or t = X. We say that a variable is unsolved when it is not solved. 

Definition 5.24 (Measure on constraint problems). Write A4 for the set of finite multisets 
of elements of N+ and write {{f{x) \ x (z S, P{x)}} for the multiset of values f{x) where x G 
S and X satisfies the property P{x). Now, we begin by defining two intermediate measure 
functions from constraint problems 3A(c) into M, each parameterised by a valuation W G 
a-Tree-^,{A^). 

/xi(VF)(3A(c)) = {{\x'\{W) \ X e dom{/^),x \s unsolved}} 

/.2(H^)(3A(c)) ^ {{\c\{W)\c&c}} 

We now define a measure function ^ on constraint problems in terms of /xi, ^2 and a 
valuation W G a-TreeY,'o{A^)- 

/i(iy)(3A(c)) ^ (/xi(iy)(3A(c)),M2(Vl^)(3A(c))) 

Since and ^2 are functions into M it follows that /i is a function into x A^. There is a 
well-founded ordering -<_m on induced by the usual well-founded ordering < on natural 
numbers, via the multiset ordering construction from |DM79] . From the lexicographic 
product of -<j^/[ with itself we derive a well-founded ordering -<mxM on x A^, which we 
will use to provide a well-founded ordering on the results of the ^ function. 

We now have the necessary tools to show that transformation of any constraint problem 
whose first-order reduction is satisfiable will terminate. The proof uses the standard strategy 
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of interpreting constraint problems in a set equipped with a weh-founded ordering, using 
the measure function defined above. 

Theorem 5.25 (Termination). // hs 3A(c) ok holds and \= (3A(c))'' then there is no 
infinite sequence of — > transformations starting from 3A(c). 

Proof. We will proceed by showing that 

3A(c) 3A'(c') =^ fi{W'){3A'{c')) ^mxM KW)i3A{c)) (5.1) 

holds, for any W G a-Treej^\,{A^) such that ^ and any W' E a-Tree^b (A''') which 

agrees with W on c?om(A'') and is such that W' \= c'^/. 

This suffices to prove termination because (by Lemma [5T9]) solutions to reduced prob- 
lems are preserved by the transformation rules. By assumption, if \= (3A{c))^ holds then 
there exists some W G a-Treej^b{A^) such that W \= c^. Therefore, for any solution W 
of the reduced problem (3A(c))'' we get a family of derived solutions W for the reduced 
problem {3A'{c'))^ , each of which produces a strictly smaller value for n{W'){3A'(c')) in 
the well-founded ordering -<mxM- If we repeat this argument along the transformation 
sequence it follows that the chain must eventually terminate. 

To prove that (jS.ip holds, we proceed by case analysis on the rule used to derive 
3A(c) — > 3A'{c'). We will present the case for rule (E7) in full, as it is the most involved. 

(E7): We assume that c = {<xi..k>x = <yi..k>t) & c* and that W \= c^, where = 
{<xi..k>x = <yi..k>t)\ k c*^ and W G a-Tree^hiA^). We also assume that c' = (x = t*) k 
l<xi..k>x = <yi..k>t)k{c*[t*/x]) and A' = A, A* both hold, where [A;t] ^ [A*;**] 
holds. Furthermore, we let W' G a-Tree^^b (A'^) be such that W' \= c'\i holds and such 
that W and W' agree on dom{A^). By assumption, x ^ vars{t) and since dom{A*) fl 
dom(A) = by definition, it follows that rule (E7) changes x from unsolved to solved and 
replaced it with unsolved variables dom{A*). Thus we must show that [2;] (W) < [x] (W) 
for all z G dom{A*). 

Now, since W' \= c'a' we know that W ^ x\, = t\, holds, and by LemmaE^D we get 
that [a;](14^') = [t*](H^') holds. Since t is not a variable we know that A{x) cannot be a 
name sort and hence x G dom{A!'). Thus we get that W{x) = W'{x) and it follows that 
\x'\{W) = [xKVF')- Therefore we know that \x'\{W) = \t*^{W'). It is easy to see that 
[z](W) < [t*](VF') holds for all z G dom{A*), from which it follows that [zl(VF') < 
[x](VF) holds for all z G dom{A*). Hence we have shown that fii{W'){3A'{c')) -^m 
fii{W){3A{c)) holds, from which it follows that n{W'){3A'{c')) ^mxM f^iW){3A{c)), 
as required. 

In the case for rule (E6), one unsolved variable becomes solved. In each of the remain- 
ing cases, there are no more unsolved variables in dom{A') than in dom{A). Further- 
more, //2(W^')(3^'(c')) is formed from ^2{W){3A{c)) by removing [c*](V7) (for some c*) 
and replacing it with zero or finitely many elements [cT](VF'), where i G {l,...,/c} for 
some k, and where W = W since A' = A. Now we get that [c*](Ty) < [c*](Ty) for 
ah i G {l,...,/c}. Thus we get ijl2{W'){3A' {c')) <m M2(VF)(3A(c)), and it follows that 
^^{W'){3A'{c')) ^MxM KW)i3A{c)), as required. □ 

Thus we have shown that (1) the reduced problem {3A{c))^ is satisfiable then the 
original problem 3A(c) is strongly normalising, and (2) if {3A{c))^ is unsatisfiable then 
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3A(c) is unsatisfiable. These properties mean that satisfiabihty of reduced problems is a 
suitable decidable check for detecting may-divergent constraint problems. 

5.3. Soundness and completeness of the algorithm. In this section we prove correct- 
ness of a decision procedure for non-permutative nominal constraint problems which uses 
the constraint transformation rules from Figure [3j We proceed by relating the syntactic 
forms of constraint problems in — )-normal form to their satisfiability. 

Definition 5.26 (Solved constraint problems). A constraint problem 3A(c) is solved iff all 
constraints in c have one of the following forms. 

(1) X # y, where x and y are distinct variables and either A(x) = A{y) or A(y) is not a 
name sort; 

(2) X = t, where x ^ vars{t) and x does not appear elsewhere in c; 

(3) <xi..k>x = <yi..fc>y, where k > and A(x)(= A(y)) is not a name sort and x and y are 
distinct variables; or 

(4) <xi..k>x = <yi..k>x, where k > and A(x) is not a name sort. 

Lemma 5.27. Any solved constraint problem 3A(c) is also terminal. 

Proof. By cases on the possible constraints that may appear within a solved constraint 
problem, according to Definition 15.261 □ 

The relationship between terminal and solved constraints and their satisfiability is cru- 
cial to the correctness of our algorithm. We now show that once a problem has been 
reduced as far as possible using — > we can determine whether it is satisfiable by examining 
its syntax. 

Lemma 5.28 (Terminal constraints and satisfiability). Let 3A(c) be a terminal constraint 
problem such that hs 3A(c) ok. Then 3A(c) is satisfiable iff it is solved. 

Proof. We assume that hs 3A(c) ok. By inspection of the constraint transformation rules, 
the possible forms of constraint in a terminal constraint problem consist of the possibilities 
presented in Definition 15.261 as well as the following: 

(5) x#x. 

(6) <xi..k>K t = <yi..k>K' t', where K 7^ K'. 

(7) X = t, where x £ vars{t) and t is not x. 

(8) <Xi..k>x = <yi..fc>t, where A; > and x E vars{t). 

In particular, an equality constraint between two terms which have different numbers of 
outermost nested abstractions is not terminal, as it can be reduced by narrowing using 
rule (E7). It suffices to show that any single constraint conforming to possibilities [SHSl is 
unsatisfiable, and that any solved constraint problem is satisfiable. We prove these below. 
Any constraint of the form [5H8] is unsatisfiable: Constraints of form [5] are not sat- 
isfiable because a name cannot be fresh for itself, and constraints of form [6] are not 
satisfiable because the constructors do not match. Finally, constraints of forms [7] and [8] 
are not satisfiable because the occurs check fails. 
Any solved constraint problem is satisfiable: For a solved constraint problem 3A(c) 
we will construct a satisfying valuation V. We write Cj for the partition of c where the 
constraints are all of the form i G {1, 2, 3, 4}. 

We observe that we can form a satisfying valuation 1/3^4 for csWq because the variables 
X and y in constraints of form 3 and x in form 4 cannot be of name sort and hence cannot 
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coincide with any of the abstracted variables. Therefore we can simply instantiate the 
abstracted variables distinctly (i.e. avoiding aliasing) and instantiate the variables within 
the nesting to avoid the abstracted variables and satisfy the appropriate constraints. 

Now we note that if {x#y) € ci and x,y £ vars{c3 W C4) then ¥3^4 \= x#y hy con- 
struction. Therefore we can extend V3^4 with additional mappings which ensure that all 
freshnesss in ci are satisfied, to produce a valuation 14^3^4 which satisfies ci l+l C3 tt) C4. 

Finally it is always possible to extend ¥1,3,4 to a satisfying valuation V for the entire 
problem c. We begin by providing an arbitrary instantiation for any variable z G vars{c2) 
which only appears on the right-hand side of constraints in C2 and which has not already 
been instantiated. This just leaves the variables x which appear on the left-hand side of 
the constraints in C2. By assumption on solved constraints these variables cannot appear 
elsewhere in c and hence cannot have been instantiated already. Hence we are free to 
choose instantiations for these variables which satisfy C2. Thus we get that ^ |= c, as 
required. □ 

With these results under our belt we can begin to examine the correctness of the constraint 
transformation algorithm. We begin by proving a soundness result: if a constraint problem 
has a solved — ^-normal form then it is satisfiable. 

Theorem 5.29 (Soundness of transformation algorithm). For any constraint problem 3A(c) 
where hs 3A(c) ok holds, if there exists a — >-normal form 3A'(c') of 3A(c) which is 
solved then 3A(c) is satisfiable. 

Proof. Suppose that 3A'(c') is a — >-normal form of 3A(c). If 3A'(c') is solved then 3A'(c') 
is satisfiable by Lemma [5.281 i.e. there exists some V' G a-rrees(A') such that V \= c' . 
Finally, by Theorem 15.21 we get that V \= c holds (where V is the restriction of V to 
dom(A)) and hence that 3A(c) is satisfiable, as required. □ 

We now prove a partial completeness result which is not quite the converse of Theo- 
rem [529] because it only applies to strongly normalising constraint problems. The assump- 
tion that 3A(c) is strongly normalising is needed to ensure that it has a — )-normal form, 
which we then show is satisfied by V. 

Theorem 5.30 (Partial completeness of transformation algorithm). Let 3A(c) be a strongly 
normalising constraint problem such that \—s 3A(c) ok holds. //3A(c) is satisfiable then 
there exists a — > -normal form 3A'(c') o/3A(c) which is solved. 

Proof. If 3A(c) is satisfiable then there exists a valuation V G a- Trees (A) such that V \=c 
holds. Since 3A(c) is strongly normalising we know that every transformation sequence 
eventually terminates. Then, by Theorem 15.61 we know that there is some sequence of 
transformations from 3A(c) which terminate at a problem 3A'(c') such that V \= c' holds, 
where V extends V to dom{A'). Finally, by Lemma 15.281 it follows that the — ^--normal 
form 3A'(c') is solved, as required. □ 

Now we use the termination checking procedure from Section 15.21 to close the gap in 
Theorem 15. 30[ giving us a correct decision procedure for NonPermSat. 

Theorem 5.31 (Correct decision procedure). There exists a correct decision procedure for 
NonPermSat based on the constraint transformation rules from Figure [3 

Proof. Using the termination check from Theorem 15.251 we can dismiss may-divergent con- 
straint problems as unsatisfiable without having to rewrite them using the rules from Fig- 
ure [3l This allows us to restrict our attention to strongly normalising constraint problems 
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3A(c), for which we can compute the finite set S of — ^-normal forms, that is, the set 
S = {3A'(c') I 3A(c) — > > 3A'{c') 7^}, in finite time. By Theorem [529] and The- 
orem [STSQl the constraint problem 3A(c) is satisfiable precisely when there exists a solved 
constraint problem in S, which is a decidable property of the syntax of S. □ 

The algorithm presented in this section decides satisfiability of non-permutative nominal 
constraint problems: it does not enumerate solutions. Recalling Definition 15.261 we see 
that solved constraint problems may contain constraints of the form <xi..k>x = <yi..k>y or 
<xi..k>x=<yi..k>x, where k > and where x and y are not variables of name sort. Constraints 
of these forms may be satisfied by infinitely many different ground valuations, as x and y 
may range over some recursive datatype. Since these may be the only occurrences of x and 
y in the constraint problem, it follows that a satisfiable non-permutative nominal constraint 
problem may have infinitely many satisfying ground valuations. However, Theorem 15.311 
demonstrates that our algorithm only needs to check the finite number of elements of S to 
ascertain the patterns that all satisfying ground valuations must follow. 



6. Encoding name-name equivariant unification 

In this section we present a reduction of equivariant unification between name-terms into 
non-permutative nominal constraints. This will make explicit the link between equivariant 
unification and non-permutative nominal constraints alluded to in Section [3l It is sufficient 
for our purposes to consider equivariant unification between terms of name sort because that 
sub-problem of equivariant unification is known to be NP-complete |Che041 Section 7.1]. We 
recall the grammar of equivariant unification name-terms from Section [2.31 



Vertices 


V, w 


::= n 


(name) 






1 A 


(name variable) 


Name-terms 


a, b 


::= U-v 


(suspended permutation) 


Permutation-terms 


n 




(identity) 






1 U) 


(swap) 






1 Q 


(permutation variable) 



We also refer back to Section 12.31 for the semantics of name-name equivariant unification 
problems. To simplify our presentation we assume (without loss of generality) that all sub- 
terms of the forms 11"^ • v and (11 o 11') • v have been expanded away by the addition of 
fresh name variables (to represent intermediate values) and additional equality constraints. 
This process is described as "phase two" of the equivariant unification algorithm [ChelO[ 
Section 4.2.2]. For example, the name-term 11"^ ■ v can be translated to the fresh name 
variable A, given the constraint that H ■ A = v (where 11 has been recursively expanded out 
in the same way). Furthermore, we assume that all names are of a single name sort A^. 



6.1. Defining the encoding. In order to encode equivariant unification we must use dif- 
ferent collections of variables to represent names, name variables and permutation variables. 
Thus we assume that the countably infinite set of variables Var is partitioned into finitely 
many disjoint, countably infinite subsets Var Name, VcLr^yar, and Varg^, . . . , VarQ^, where 
Qit ■ ■ , Qk is the finite set of permutation variables which appear in the problem of interest. 
These will be used to represent the permutative names, the name variables and the results 
of applying the unknown permutations Qi, ■ ■ ■ ,Qk to other name-terms, respectively. For 



24 



M. R. LAKIN 



the translation we will also need additional variables to store intermediate values — for these 
will use another disjoint, countably infinite set of variables VarTemp- We fix bijections into 
these sets, as follows: 

• a bijection from Name to Varj^ame, where Xn G Varpfame stands for n G Name; 

• a bijection from Nvar to VarNvar, where xa £ Var^var stands for A € Nvar; and 

• for each permutation variable Q a bijection from Name tt) Nvar to Varg, where X(^Q^y^ € 
Varq stands for Q ■ v for v G {Name tt) Nvar). 

For the translation we fix a trivial nominal signature S where Ce = Bs = and where 
Ns = {N} for some fixed name type A^. Given finite sets n, A and Q and a finite set x C 
Var^emp we define a typing environment for the corresponding non-permutative variables: 

\n,A,Q,i,) = {xn:N\nen}^{xA:N\AeA}\i) 

{x^Q^^) :N \ Q eQ Av e {ri\iiA)}\S {x:N \ X ex} 

where is the single name sort from S. Note that Aj._, 5 ^(nAQx) holds if 

n' ^ n, a' ^ A, Q 2 Q and I) x all hold. The following rules specify the translation 
of an equivariant unification name-term a into a variable x and associated constraints c' in 
NPNAS, which involve the new variables x' . We write this as tr(a)x = 3x'{x where c'). 



tr(t • i;)jr = 30(x„ where 0) tr{Q ■ v)^ = 30(x(q_„) where 0) 

tr(a)^ = 3x1 where ci) ti'(6)(5tt)^^) = 3x2(x;, where C2) z ^ (xttixi 1+1x2) 

tr((a6) • f)^ = 3(X1 tt) X2 W {-2})(2; where Ci & C2 & {<Xa><Xb>Z = <Xb><Xa>Xy)) 

Here, and throughout, x C VarT^emp is a finite set of temporary variables which have already 
been used and must be avoided in the rest of the translation. The following result states 
the semantics of the "swapping" construction. 

Lemma 6.1 (Swapping constraints). Suppose that x,y,u,w € dom{V), V € Q-Trees(A) 
and A(x) = A(y) = N for some name sort N , and where V{x) = {n} and V{y) = {n'}, 
for some n, n' . Then we get that V \= <x><y>u = <y><x>w iffV{u) = (nn') ■ V{w). □ 

The NPNAS translation of an equivariant unification constraint can now be defined 
straightforwardly. We write tr(c)^ = 3x'(c') if the equivariant unification constraint c is 
translated to the NPNAS problem c', involving new variables x' and avoiding x. 

tr(a)^ = 3x1 (xg where ci) tr(6)(^ax^) = 3x2{xb where 02) 

tr(a « b)x = 3(xi tt) X2)(ci & C2 & x^ = x;,) 

tT{a)x = 3x1 (xg where ci) tr{b)(xisxa) = ^Xjjxb where C2) 
tr(a # b)x = 3(xi tt) X2)(ci & C2 & Xg # x^) 

In order to model permutative names and permutation variables using the standard non- 
permutative variables from Section [3l we must impose some additional consistency con- 
straints on the variables to ensure that they refiect the correct semantics. In particular, we 
will want to express pairwise distinctness constraints between finite sets of name variables. 
For a finite set x = {xi, . . . , Xfc} of variables of name sort, we write #^ for the set of atomic 
freshness constraints {xj #Xj\l<i<j<k}. 
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Definition 6.2 (Consistency constraints). Given finite sets n, A and Q we write C(n, A, Q) 
for the consistency constraints over n, A and Q, which are defined as follows. 

C(n, A, Q) = #{j;„|n6n} & {<Xy><X^>>Xy = <X(Q_^)><X(Qy)>a;(Q^^) 

I Q G Q A i; 7^ A {u, v'} C (n 1+) ]4)} 

Consistency constraints will be crucial in the proof that our encoding of equivariant uni- 
fication is correct. The first part of C(n, A.Q) requires that the variables which rep- 
resent the names in n should all be distinct — this encodes the fact that names n are 
permutative in equivariant unification. The following result states the semantics of the 
<Xa><x\,>z = <Xb><Xa>Xy Constraints used in the second part. 

Lemma 6.3 (Bijection constraints). Suppose that x,y,x',y' G dom{V), V G a-IVees(A) 

and A(x) = A{y) = A{x') = A{y') = N for some name sort N. Then we get that 
V [= <x><y>x =<x'><y'>x' iff V{x) = Viy) V{x') = V{y'). □ 

Thus the second part of C(n, A, Q) requires that all instantiations of the variables x^g^^^ 
(which represent the application of Q to v) respect the fact that Q denotes an unknown 

hijection. 

Wc now have all the ingredients needed to define the NPNAS translation of a name- 
name equivariant unification problem S, using similar notation to above. 

n = names (S) A = nvars{S) Q = pvars{S) S = {ci, . . . , c^} 

tr(ci)0 = 3xi(ci) • • • tT{ck)(xitiJ-wxk-i) = ^Xkjck) 

tr(S') = 3(xi 1+) ■■■ axfe)(ci & • • • & Cjt & C(n,A,Q)) 

Lemma 6.4 (Typing lemma for problem translation). Iffi; A;Q \- S ok and tr(S') = 3x{c) 
then A^--jq-^\-j:c ok. □ 

6.2. Correctness of the encoding. In this section we prove that every satisfying ground 
valuation 9 for a name-name equivariant unification problem can be translated into an 
NPNAS valuation which satisfies the corresponding NPNAS constraint problem, and vice 
versa. We begin with the translation of ground equivariant unification (EU) valuations. 

Definition 6.5 (Translating EU ground valuations). Given a ground valuation and a 

finite set n of names, write V(0,n) the NPNAS valuation where 

• dom(V(5)^^)) = {xn I n G n} 1+) {xa \ A G dom{6)} 1+) {x(q^v) I Q ^ dom{9) Ave {n\±l A)}; 

• Vx„ G dom{V(^g^n)). V(^g^n){xn) = {n}; 

• VxA G dom(V(0_^)). V(^g^n){xA) = {OiA)}; and 

• Vx(Q,„) G c?om(V'(0,^)). V(e,w)(a::(Q,^;)) = {^(Q) • ^ (^^)}- 

The definition of V(9 uses the partitions of Var described above to encode the different 
kinds of variables and names from equivariant unification. The additional n parameter is 
needed because the valuation in EU does not provide instantiations for names, whereas the 
valuation in NPNAS must provide instantiations for the variables corresponding to those 
names. Note that ^(e.H) ^ '^''^''"^^^(^{nAQ 9))^ where A = {A \ A ^ dom{9)} and Q = 
{Q I Q G dom{9)}. Recalling that a "vertex" v is either a name ra or a name variable A, it 
is straightforward to show that, for any v, if names{v) C n and namevars{v) C dom{9) then 
y{e,n){xv) = {9(y)}. We now show that translated EU valuations satisfy the appropriate 
consistency constraints. 
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Lemma 6.6 (Translated valuations and consistency constraints). If A = {A \ A G dom{6)} 
and Q = {Q \ Q E dom{9)} then Vi^q^^-j \= C(n, A, Q). 

Proof. We must show that (1) \in ^ n' and {n, n'} C n then V(g 7j)(a;„) / V(g :^-)(a;„/); and (2) 
if Q £ Q and {v,v'} C (n 1+1 A) then Vj-g^^) \= <Xv><Xyi>Xv = t,)><X(Q t,/)>X(Q j,). In both 
cases we use the definition of y(e,n)- For the second we furthermore rely on the fact that 0{Q) 
is a permutation, and hence that V(^g^j^){xy) = V(0^^)(x„/) iff V(e,w)(a;(Q,^,)) = V(e^^)(a;(Q 
and the result follows by Lemma l6.3i □ 

We now show that any solution to a problem in EU can be translated into a satisfying 
valuation for the corresponding NPNAS problem. 

Lemma 6.7 (Problem satisfaction from EU into NPNAS). Suppose that n = names{S) , 
'A = nvars{S) = {A\Ae dom{9)} and Q = pvars{S) = {Q \ Q £ dom{e)}. If 9 \= S and 
tr(S') = 3x{c) then there exists a valuation V* G a- Trees ( A ^--^g-^ which extends V(g y^) 
and is such that V* \= c. 

Proof. By induction on the structure of EU name-terms a, we can show that if tr(a)^ = 
3x'{z where c) (where A = {A \ A £ dom{0)}, Q = {Q \ Q £ dom{9)} and n;A;Q\- a ok) 
then there exists a valuation V* £ Oi-'^''^^^^{^(nAQ{x\Hx'))) which extends V(g^n) is such 
that V* \= c and V*{z) = {6(a)}. This relates the result of instantiating a name-term in 
EU to the corresponding term instantiation in NPNAS. 

We can then prove a similar result for atomic constraints: ii 9 \= c and tr(c)^ = 3a;' (c) 
(where A = {A \ A £ dom{9)}, Q = {Q \ Q £ dom{9)} and n;A;Q\-c ok) then there exists 
a valuation V* £ a- Treej] ( ^ g (xm'))^ which extends V(g^^) and is such that V* \= c. This 
uses the above result and relates constraint satisfaction in EU to constraint satisfaction in 
NPNAS. 

Then, if 9 \= S then 9 \= c holds for all c £ S, where we suppose that S = {ci, . . . , Cfc}. 
We assume that tr(5) = 3x(c) holds, where t^{ci) (^■^^iixi^n-'-tiixi-i) = 3xj(cj) holds for all 
i £ {!,..., A;}. Using the above result about constraint satisfaction we can construct a 
single NPNAS valuation V* which extends Vj-g^^) and is such that V* \= Ci holds for all 
i £ {1, . . . , k}. Thus we have that V* ^ ci & • • • & holds. By Lemma 16.61 we know that 
^(e,n) N C(n, ^,Q) holds: hence V* \= C{n,A,Q) holds also. Hence we get that V* \= c 
holds, as required. □ 

We now turn to the other direction — we begin by proving that any NPNAS valuation 
which satisfies a set of consistency constraints can be translated back into a corresponding 
EU valuation. 

Lemma 6.8 (Consistency constraints imply an EU valuation). IfV£ a-Trees(A^-^ g 

and V \= C{n,A,Q) then there exists a permutation Tiy and a ground EU valuation 9v 
(with (A l±) Q) C dom{9v)) such that 

(1) Wn £n^ V{xn) = {7rv(n)}; 

(2) £ A. V{xa) = {Try ■ {Ov{A))}; and 

(3) VQ £Q.yv£ (nisA). Vix^Q^,)) = {ny ■ {(OvmiOviv)))} . 
Proof. We prove the three points separately. 

(1) This follows from the fact that V \= #{x„|ngn} holds, which implies that we can fix a 
permutation Try which is a bijection between n and {V{xn) \ n £n}, as required. 
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(2) We note that {xa | ^ € ^} n {x„ | n € n} = 0. Thus we can construct a ground EU 
valuation 6v such that \/A G A. V{xa) = {t^v ■ by setting 9v{A) = 7ry~^(n) 
if V{xa) = {n}. _ _ 

(3) Since V \= C{n,A,Q) we know that V \= <x^><x^'>x„ = <X(q^^)><X(q^^/)>X(q holds 
for all Q G Q and all v,v' G A). By Lemma 16.31 we get that there is a bijection 
between {V{xv) | f € (n l±) A)} and {V^(a^(Q,x„)) | w G (n W ^)}- We represent this bijec- 
tion as a permutation vr. From the first two proof obligations we know that V^x^) = 
{ttv • (6'y(t'))} for all v G (re 1+174), and hence that V{x(^q^^^) = {vr • (vry • (^y(t;)))}, 
i.e. that V^(a;(Q^„)) = {(vr o vry) • (0y (t;))}, for all v G (n^A). Now, we can de- 
compose vr into the form vry o vrg o vry^^ for some ttq. Thus we get that, for all 
V G (rettiA), y(x(Q^„)) = {(vry ovrg ovry-i o vry) • (6*^7;)} = {(vry o vrg) • (^w)} = 
{vry • (vrg • (Oviv)))}. Thus if we let 9y{Q) = ttq then we get that \/Q G Q- Vw G 
(n^A). F(x(Q,^)) = {vry • {{ev{Q)){9v{v)))} holds, as required. □ 

We now show that any satisfying valuation for the NPNAS translation of an EU problem 
can be translated back into a solution of the original EU problem. 

Lemma 6.9 (Problem satisfaction from NPNAS into EU). Suppose that n = names{S) , 
A = nvars{S) and Q = pvars{S), and that tr{S) = 3x(c), V G a-TreeY:{A^-^-Q--j) and 

V \= c all hold. Then there exists a ground EU valuation Oy (with {A^Q) C dom{9v)) 
such that 9v \= S. 

Proof. The structure of this proof rather mirrors that of Lemma 16.71 We begin by showing 
that if re; ^; Q h a ofc, t-r[a)x = 3x'{z where c), V G a-rrees(Aj.-^g {xinx'))) F |= c all 
hold then V{z) = {vry • 0y(a)} holds, for some By and vry which satisfy the three conditions 
stated in Lemma |6.8[ This relates instantiations of translated EU name-terms in NPNAS 
back to instantiations of the original EU term, up to a permutation. 

We proceed to prove a similar result about constraint satisfaction — if n;A;Q\-c ok, 
tr{c)x = 3x'(c), V G ct-Treej]{A^-^Q ^-^^-,■^■^) and ^ |= c all hold then 9v \= c, where By 
satisfies the three conditions stated in Lemma 16.81 (for some vry). This uses the previous 
result and shows that satisfaction of translated EU constraints in NPNAS can be related 
back to the semantics of the original constraint in EU. There is a twist here, as we must use 
the equivariance property of the NPNAS semantics (Remark 13. lip to strip off the unwanted 
permutation vry. 

Thus, if tr(5) = 3x{c) then c = (ci & • • • & Cfc & C(re, A, Q)), S = {ci,...,Ck} and 
X = l±) • • • l±) Xfc all hold, where n = names (S), A = nvars{S), Q = pvars{S) and where 
tr{ci)(xiis---mi-i) = 3xj(cj) holds for alH G {1, . . . , k}. It follows that n;A;Q\-S ok holds. 
We assume that V \= c, i.e. that V \= C{n, A,Q) holds and that V \= Ci holds for all 
i G {1, . . . , A;}. By Lemma 16.81 we get that there exists a permutation vry and a ground EU 
valuation Oy (with (A l±) Q) C dom{9y)) which satisfy the three conditions laid out in the 
statement of that lemma. Then, using the above result on constraint satisfaction, we can 
show that 9y \= ci holds for alH G {1, . . . , A;}, i.e. that 9y \= S holds, as required. □ 

The key result of this section is the following theorem, which demonstrates the correct- 
ness of the encoding of name-name equivariant unification into non-permutative nominal 
constraints. 
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Theorem 6.10 (Correctness of encoding). Suppose that n;A-^Q\-S ok and tr(S') = 3x{c) 
both hold. Then, S is satisfiable ij(f BA^--^ g -^(c) is satisfiable. 

Proof. For the forward direction: if \= S then there exists a ground EU valuation 9 
such that 9 \= S. If tr(5) = 3x{c) then by Lemma 16.71 there exists a valuation V* € 
Q;-Trees(A^^^ g such that V* \= S, from which it follows that \= S holds. For the 
reverse direction: if ^ c then there exists a valuation V G a-Tree^{A^--^-Q -•^) such that 
V \= c. By Lemma 16.91 we can construct a ground EU valuation 9v such that 9v \= S, 
which shows that |= S holds. □ 

Example 6.11 (A translated EU problem). As an example, consider the following equi- 
variant unification problem which involves permutation variables and swappings. 

S = {{Q-A) = HQ .A){Q- B)) • (Q • A), (Q' • A) # {Q' ■ B)} 

We would expect this to be unsatisfiable because the first constraint implies that A = B 
whereas the second implies that A ^ B. The translation of S into NPNAS is as follows, 
where z is a freshly chosen variable. 

<X{Q,A)><X(Q,B)>Z = <Xl^Q^B)><X(Q,A)>X{Q,A) (6.1) 

& X{Q,A)=Z (6.2) 

& X{Q',A)#X(^Q,^B) (6-3) 

& <XA><XB>XA = <X(^Q^A)><X{Q,B)>X{Q,A) (6-4) 

& <XA><XB>XA = <X(Q'^A)><X{Q'^B)>X(Q',A) (6.5) 

To see that the NPNAS problem is also unsatisfiable, we observe that 16.11 and 16.21 imply 
that X(Q^yi) = X(^Q^B)- This fact, along with 16. 4t implies that xa = xb which, together with 
16.51 implies that = X(^q/^b) holds. However, this contradicts 16.31 and thus it follows 

that the NPNAS problem is unsatisfiable. 

In solving this problem, the decision procedure outlined in the proof of Theorem 15.311 
must first construct and solve the first-order reduction of the NPNAS problem, as a termina- 
tion check. In this case, this is straightforward as the names are erased and the abstractions 
replaced by tuples as outline above. Writing (0^ , t) for ((), ((), ••• ((),t))) if there are 
k nested occurrences of (), this leaves the following first-order unification problem which is 
trivially satisfiable. 

((()^ ()) = (()^ ())) & (() = ()) & ((()^ ()) = (()^ ())) & ((()^ o) = (()^ o)) 

Having ascertained that the problem is strongly normalising, we proceed to compute the set 
of — 7-normal forms using the reduction rules from Figure [31 There are 27 cases to check 
in total, since for each of 16.11 16.41 and 16.51 there are 3 branches according to reduction rule 
(E4). We do not specify a particular search strategy, provided that the entire reduction 
space is explored. In this case, none of the — )-normal forms turn out to be solved in the 
sense of Definition 15.261 which corresponds to the fact that the problem is unsatisfiable, as 
argued above. 

To see that the encoding presented in this section is a polynomial time reduction, sup- 
pose that there are fc„ names, kA name variables, kq permutation variables, kswap swappings 
and kc constraints in S. Then there are kn{kn — 1) + kQ{kn + kA) + kc + kgwap constraints 
and kn + kA + kQ{kn + fe^) + kswap variables in c, where tr(5') = 3x{c) (for some x). These 
are both polynomial functions of the size of S. 
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Note that the translation defined in this section only deals with name-name equivariant 
unification problems. We can use the results from this section to derive a translation of 
full equivariant unification into NPNAS by using the "first phase" of Cheney's algorithm 
[ChelO . Section 4.2.1] to reduce the problem into a name-name problem (if possible) before 
using the algorithm described herein to translate it into NPNAS. Note, however, that this 
is not a polynomial time reduction because the "first phase" of Cheney's algorithm has an 
exponential upper bound. 

Remark 6.12 (A tractable subproblem). Say that a non-permutative constraint problem 
3A(c) is permutative iff every valuation V € a- Trees (A) such that V \= c also has V \= 
#nvars(A)j where nvars{A) is the set of all variables x in dom{A) such that A(x) is a name 
sort. It was shown in [LaklOl Section 6.4] that satisfiability of problems in this subset can 
be decided in polynomial time via translation to nominal unification. This makes sense 
because the non-permutative behaviour which provides the additional power in NPNAS 
has been disallowed. 

7. Related and future work 

We have already discussed at length the relationship between non-permutative nominal 
constraints and the equivariant unification problem. The nominal unification problem of 
Urban, Pitts and Gabbay |UPG04j can be thought of as a ground subproblem of equivariant 
unification and hence its relationship to the work reported in this paper is subsumed by 
that of equivariant unification. 

Our algorithm bears some similarities to Huet's algorithm for higher-order unification, 
that is, unification for typed A-terms jHue7 5] . That algorithm ignores equations between two 
terms on the basis that they are always satisfiable, much as our constraint transformation 
procedure ignores constraints of the form <xi..k>x = <yi..k>y (where x and y are not of name 
sort). There may be other parallels worthy of investigation. However, it is worth noting 
that higher-order unification is known to be undecidable [GolSlj whereas we have shown 
that a decision procedure exists for satisfiability of non-permutative nominal constraints 
(see Theorem 15. 3ip . 

Higher-order unification forms the basis of an alternative technique for representing 
abstract syntax with binders known as higher-order abstract syntax (HOAS) |PE88j which 
has been used in various tools for specifying, and reasoning about, formal systems with 
binding constructs [NM881 [PS99j . These tools often exploit higher-order patterns, which 
are a restricted class of A-terms for which unification (modulo a/3o //-equivalence) is decidable 
|Mil91j . Higher-order pattern unification has been shown to be equivalent to nominal unifi- 
cation |Che05l ILV08] and it follows that our non-permutative nominal constraint language 
subsumes higher-order pattern unification just as it does nominal unification. 

Future work is needed on the relationship between non-permutative nominal constraints 
and the full equivariant unification problem (i.e. not just for name terms). This may involve 
finding an equivalent of the bijection constraint construction from Lemma 16.31 which works 
for variables of any type, not just name sorts. The termination checker described above 
could be run initially or in parallel with the constraint transformation algorithm, or omitted 
altogether to give a semi-decision procedure. An alternative implementation strategy could 
be to encode non-permutative constraint problems as boolean formulae and use a SAT 
solver to decide their satisfiability. With more work it may be possible to improve the 
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algorithm for deciding satisfiability of constraint problems in NPNAS, in particular with 
regard to termination and non-deterministic search. The ideal algorithm would avoid the 
use of name-swappings and not require a separate termination check. 

A key motivation for the development of equivariant unification was to give complete 
implementations of nominal logic programming jCU08] and nominal rewriting |FG07j in 
cases where the nominal unification |UPG04] is not sufficiently powerful. In other work 
|LP09l ILaklOj we have investigated the use of non-permutative nominal constraints in the 
context of the functional-logic programming language aML — further work may be to inves- 
tigate the theory of rewriting over non-permutative nominal terms. 

8. Conclusion 

Non-permutative nominal abstract syntax is a means of encoding terms with binders with- 
out the need for globally-fresh permutative names. We have defined a semantics for equality 
and freshness constraints over non-permutative nominal terms, and presented an algorithm 
for deciding satisfiability of these constraint problems. Our constraint solving procedure is 
novel in that it does not use permutations, which are standard in most nominal approaches 
to abstract syntax. This simplifies the term language but complicates the analysis, in 
particular the proof of termination. Our translation of name-name equivariant unification 
problems into non-permutative nominal constraints is also novel and demonstrates explicitly 
how the additional features of equivariant unification can be encoded using just permutative 
variables in binding position. Studies of non-permutative nominal constraints are important 
from both a theoretical and a practical perspective, as this algorithm could be used instead 
of the more complicated equivariant unification algorithm in situations where nominal uni- 
fication cannot compute all solutions. 
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